GRC and cybersecurity consulting in Dubai, Abu Dhabi and across the Emirates.
From our Dubai office, MAST partners with banks, insurers, healthcare groups, government entities and technology operators to deliver ISO 27001, PCI DSS, ADHICS V2, CBUAE and SIA-aligned programmes — with Lead Auditors based in the UAE.
Central Bank of the UAE — information assurance & operational resilience.
UAE Information Assurance Standards for critical sectors.
Abu Dhabi Healthcare Information & Cyber Security standard.
Department of Health Abu Dhabi and Dubai Health Authority.
Telecommunications & Digital Government Regulatory Authority.
Information Security Regulation for Dubai Government entities.
DIFC and ADGM financial-services authorities.
UAE Federal Personal Data Protection Law.
Each engagement is led by a senior consultant with sector experience in your jurisdiction.
ISMS programmes for banks, government and healthcare across all 7 Emirates.
Learn moreQSA-ready programmes for issuers, acquirers and payment processors.
Learn moreSector-specific UAE regulatory programmes end-to-end.
Learn morevCISO, SOC, red team and IR retainers from Dubai.
Learn moreCREST-led penetration testing across infrastructure, web, mobile and cloud.
Learn more24×7 incident response with court-admissible forensics.
Learn moreAnonymised snapshots of MAST delivery in your jurisdiction. Every engagement is sponsored by a named Lead Auditor.
Built a unified ISMS spanning retail, corporate, Islamic and DIFC subsidiaries with a single Statement of Applicability covering 1,200 staff.
Mapped ADHICS V2 against HIPAA and ISO 27001 to deliver one harmonised control set across 6 facilities and 40+ clinics.
Re-architected the cardholder data environment and tokenisation flows to remove 68% of in-scope systems prior to QSA assessment.
Delivered ISR and SIA-aligned uplift across 80+ controls with full evidence pack and management-review readiness.
Segmented Purdue levels 2–3, deployed OT-aware monitoring and integrated alerts into the enterprise SOC for a national utility.
Yes. Our regional headquarters is in Dubai and our consultants regularly work on-site in Abu Dhabi, Sharjah and across the Emirates.
CBUAE, SIA (formerly NESA), ADHICS V2, DoH, DHA, ISR, TDRA, DFSA, FSRA and the Federal PDPL — among others.
Yes. We deliver programmes that satisfy onshore federal regulators as well as DFSA (DIFC) and FSRA (ADGM) requirements.
Tell us about your UAE programme — a senior consultant from MAST responds within one business day.
